I just wondering about why there so many modsec rules suddenly lost it functions while using litespeed.
I had test it with a very simple rule for an example :
As above rule expected, Apache bring 406 error page to http://domain.com/abc.php access.
But unfortunatelly, litespeed will still give us totaly freedom to access http://domain.com/abc.php.
Is there any special way to write that just "REQUEST_URI denial" modsec rule with litespeed?
I had test it with a very simple rule for an example :
Code:
SecRule REQUEST_URI "^/abc\.php$" "deny"
But unfortunatelly, litespeed will still give us totaly freedom to access http://domain.com/abc.php.
Is there any special way to write that just "REQUEST_URI denial" modsec rule with litespeed?
Last edited: